Plugin Directory: Banned Users should not be able to upload plugins

[Ipstenu]

#5575 is broken and banned users can still upload plugins.

It may be that #4691 does not seem to be properly logging them out?

[dd32]

This is still very odd, a user blocked two months ago should not have been able to have an active logged in session, regardless of whether their password was reset or not. The user was banned prior to #4691 so I'm pondering if it's a stale cache being used?

I'm not entirely sure how or what is happening here, but a blocked user having an active session is far more serious than just being able to submit plugins..

I've added a super-ban-hammer on the determine_current_user filter to absolutely block a blocked user ever having an active session in r17146-dotorg & r17147-dotorg.

Let's see how that goes, it really shouldn't have been needed, but if this doesn't fix it...
(If only I could ask a banned user as to how they bypassed it...)

[Ipstenu]

FWIW the user that brought this up (again) was banned two weeks ago, so after the change, which makes even less sense.

[dd32]

Replying to Ipstenu:

FWIW the user that brought this up (again) was banned two weeks ago, so after the change, which makes even less sense.

That makes even less sense...

I was basing my reply off the last banned user that I could see who submitted 2 plugins after their ban date, whom you force reset the password for, who was banned on 2020-02-02 and submitted plugins on 2020-04-01 & 2020-04-04.

[dd32]

This has finally been resolved.